Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343038303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a343038303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          DbGgQXDJ6Rcf6+0T7hqnp6B2MHxZ1KjW1+W116B4FeU=
Subject key identifier:   34:19:4E:1B:A3:A0:7A:CC:B3:D1:9B:FA:5C:96:23:B2:FE:EA:57:51
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       5A5EB8F1CA3D445C23F9E2BDDB6FD7AB91B409F8
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343038303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        2804:ad8:4080::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5e:b8:f1:ca:3d:44:5c:23:f9:e2:bd:db:6f:d7:ab:91:b4:09:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:05:23:42:65:c2:ee:fe:99:71:63:74:89:
                    31:e7:21:b9:0d:31:b0:7e:b3:22:90:32:a9:32:e3:
                    8a:d1:5c:d6:e1:97:f6:36:2d:f2:b4:96:fa:7e:69:
                    0b:7f:8e:2d:4e:eb:75:c8:cc:5f:fd:8a:1a:0f:34:
                    0e:c3:90:6e:74:73:74:4e:f0:06:e7:76:eb:71:c6:
                    55:5e:89:67:6a:7e:fb:6f:09:6b:c0:f1:15:cd:b3:
                    26:22:80:19:c1:74:e3:d3:62:b1:3b:2c:88:98:19:
                    e4:08:9d:9c:7c:93:03:d7:7f:a1:5b:b0:2d:a8:87:
                    5f:b0:ac:f0:32:d3:40:ac:f9:57:ae:65:29:7c:28:
                    ed:05:c9:1f:61:2b:51:e1:02:54:2f:33:29:19:f2:
                    03:74:1d:a9:46:d4:08:cc:9c:25:24:40:93:d8:36:
                    43:be:6f:ce:b1:b2:3a:30:5c:2f:55:b5:9c:a3:4d:
                    e8:a4:f0:30:d6:a1:bc:50:61:e2:29:b0:42:49:f4:
                    bd:ed:0c:b3:33:12:49:99:cd:f8:15:61:4c:af:00:
                    07:2e:2f:9c:66:40:e4:b5:d0:d0:3e:56:7d:99:77:
                    22:94:b3:de:b8:d7:b4:6c:4e:9c:00:0d:05:c2:84:
                    38:a4:0d:ad:bc:f2:91:77:ed:27:d1:c7:b4:b2:e3:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:19:4E:1B:A3:A0:7A:CC:B3:D1:9B:FA:5C:96:23:B2:FE:EA:57:51
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343038303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4080::/41

    Signature Algorithm: sha256WithRSAEncryption
         16:9f:6d:5b:ae:bd:8b:86:21:27:67:0e:73:7b:20:67:97:43:
         ba:0e:c7:c3:b6:c4:06:36:45:14:bf:1f:4e:a3:cb:30:24:db:
         e9:da:e1:06:97:a0:9b:fd:87:0c:44:27:a4:ae:8f:c1:24:ce:
         2d:62:00:9f:88:aa:4a:c0:e5:e4:e2:c0:34:4e:2e:53:90:c6:
         1f:7a:a8:75:72:2b:f7:4d:6c:c9:e0:27:04:b2:45:23:12:77:
         f8:96:8b:1a:72:50:f7:02:e1:1b:b5:58:c4:b1:5c:2e:2f:79:
         ad:4a:bc:8c:af:d4:22:61:fe:ad:71:1e:d0:ca:23:07:fd:fa:
         2e:80:4b:c5:1b:a6:eb:84:75:4b:80:29:82:7c:eb:c6:21:d1:
         01:4b:22:f3:3a:89:06:91:56:c2:01:c3:2c:c3:01:1b:45:ed:
         c4:08:64:b9:ae:0b:18:f4:3d:d1:4c:3f:bb:6e:97:3d:65:cc:
         94:ef:12:ea:e8:b0:4e:24:b9:c4:36:b2:8e:17:6c:5e:cd:04:
         d2:a6:81:18:9d:08:c1:b0:01:d4:83:c4:1a:a4:90:e3:00:29:
         0e:95:b1:aa:fc:60:1b:cc:f4:60:d8:08:8e:88:06:51:32:f5:
         fd:21:96:99:7a:13:52:a2:67:c4:f9:88:90:76:c1:d3:27:dd:
         e7:b9:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:36 2024 by rpki-client on console-ams.rpki-client.org